General

  • Target

    Trojan.Win64.Meterpreter.pz-002128e812585cea9afefc4448df8c661aa439a6dc634655e2e3a1f5ce574958N

  • Size

    7KB

  • Sample

    240916-a3kays1cml

  • MD5

    b4a899b8f62fa487920635266b7bb620

  • SHA1

    8e1e4c5a7276b18d16b6f588144b4ceb60acc509

  • SHA256

    002128e812585cea9afefc4448df8c661aa439a6dc634655e2e3a1f5ce574958

  • SHA512

    2fa92f239c59ff47c09532021a16e41b2e6d3f6467249dfc6fe1a453055c0c8306614dd9a0cc16f62584bb1211892d2772cf65589a059c9c478f7eed455916c6

  • SSDEEP

    24:eFGStrJ9u0/6fKmHnZdkBQAVKG1YLYKLq4deNDMSCvOXpmB:is07mjkBQvGqLYYdSD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.93.129:8888

Targets

    • Target

      Trojan.Win64.Meterpreter.pz-002128e812585cea9afefc4448df8c661aa439a6dc634655e2e3a1f5ce574958N

    • Size

      7KB

    • MD5

      b4a899b8f62fa487920635266b7bb620

    • SHA1

      8e1e4c5a7276b18d16b6f588144b4ceb60acc509

    • SHA256

      002128e812585cea9afefc4448df8c661aa439a6dc634655e2e3a1f5ce574958

    • SHA512

      2fa92f239c59ff47c09532021a16e41b2e6d3f6467249dfc6fe1a453055c0c8306614dd9a0cc16f62584bb1211892d2772cf65589a059c9c478f7eed455916c6

    • SSDEEP

      24:eFGStrJ9u0/6fKmHnZdkBQAVKG1YLYKLq4deNDMSCvOXpmB:is07mjkBQvGqLYYdSD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks